gcdRadar
closedclosed 12 Nov 2026Breaches & attacks4 Confirmed real-world loss

Fake crypto app Padre Terminal on Apple App Store steals $23K

Padre Terminal, Apple App Store

A malicious cryptocurrency trading application named Padre Terminal was hosted on the Apple App Store and resulted in $23,000 being stolen from 27 user wallets. Apple subsequently removed the rogue application.

why this severityConfirmed real-world financial loss affecting multiple users.

affected
Padre Terminal on iOS
first report
29 Oct 2026
last update
29 Oct 2026

What to do

Uninstall Padre Terminal and revoke access permissions for affected wallets.

Timeline · 1

  1. 29 Oct 2026Fake crypto app on Apple App Store linked to $23K wallet theft

Sources · 1

News and write-ups

  1. 2026-10-29
    Fake crypto app on Apple App Store linked to $23K wallet theft
    BleepingComputer · bleepingcomputer.com/news/security/fake-crypto-app-on-apple-app-store-linked-to-

Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.

Classification

AI role
No AI role
categories
General security
severity
4 · Confirmed real-world loss
targets
Individuals
owasp llm top 10
no entry for these categories
mitre atlas
no technique for these categories
dates
happened 29 Oct 2026 · first reported 29 Oct 2026
origin
News & research feeds
record
confidence 0.95 · created 2026-10-29 23:23Z · updated 2026-11-13 00:11Z

Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned

Copy a brief

This record as a short Markdown brief, for a ticket, a chat or a coding agent.

the brief as text
# Fake crypto app Padre Terminal on Apple App Store steals $23K

https://gcdradar.vercel.app/incidents/fake-crypto-app-padre-terminal-on-apple-app-store-steals-23k · AIR-2026-1657 · closed 2026-11-12

- Lane: Breaches & attacks
- Severity: 4 (Confirmed real-world loss): Confirmed real-world financial loss affecting multiple users.
- Fix status: No fix needed
- First reported: 2026-10-29
- AI role: No AI role
- Products: Padre Terminal, Apple App Store

## Summary

A malicious cryptocurrency trading application named Padre Terminal was hosted on the Apple App Store and resulted in $23,000 being stolen from 27 user wallets. Apple subsequently removed the rogue application.

## What to do

Uninstall Padre Terminal and revoke access permissions for affected wallets.

## Affected and fixed versions

- Affected: Padre Terminal on iOS

## Latest updates

- 2026-10-29: Fake crypto app on Apple App Store linked to $23K wallet theft (https://bleepingcomputer.com/news/security/fake-crypto-app-on-apple-app-store-linked-to-23k-wallet-theft)

## Sources

- 2026-10-29 BleepingComputer: Fake crypto app on Apple App Store linked to $23K wallet theft https://bleepingcomputer.com/news/security/fake-crypto-app-on-apple-app-store-linked-to-23k-wallet-theft

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.

Related

  1. live
    WARDEN Stealer distributed via fake Grand Theft Auto VI download links

    Breaches & attacks · Exploited · since 13 Nov 2026

  2. live
    Zoom North Korean hackers steal $400M via fake Zoom and Teams video calls

    Breaches & attacks · Real loss · since 12 Nov 2026

  3. live
    Binance US seizes North Korean hacking infrastructure linked to Binance theft

    Breaches & attacks · Real loss · since 13 Nov 2026

  4. live
    Extortion Group Luna Moth Targets Law Firms With Microsoft Token Theft

    Breaches & attacks · Exploited · since 12 Nov 2026

  5. live
    FaceTime Iran-backed Network Directed Attacks on European and US Sites

    Breaches & attacks · Real loss · since 11 Nov 2026

  6. live